Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: eTrP2dZ0zBgceaGLNu3AGRwmjAQdkYX39/yWh+ze1hs=
Subject key identifier: 3A:09:8B:BA:4A:B7:8D:74:DC:46:85:85:06:0D:12:99:30:B4:83:57
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019678D64D48D68301DB8A57045458527CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 20:00:32 +0000
Manifest this update: Sun 27 Apr 2025 20:00:32 +0000
Manifest next update: Mon 28 Apr 2025 20:00:32 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: BxLMN68HTOG5wFfVp8C4tY/WwLosBzq4O6Pwdcl5vjk=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:4d:48:d6:83:01:db:8a:57:04:54:58:52:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Apr 27 20:00:32 2025 GMT
Not After : Apr 28 20:00:32 2025 GMT
Subject: CN=3a098bba4ab78d74dc468585060d129930b48357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:92:61:e2:c1:a4:85:84:20:6e:a6:a7:27:
81:c4:17:41:86:1b:70:13:70:37:05:ba:26:d9:42:
49:69:f9:ba:71:c9:c6:11:2a:ca:d2:4a:d6:44:4b:
7a:89:f5:0d:ee:d6:d5:e8:b9:69:7d:42:a6:59:35:
3d:25:43:68:d6:c1:74:bf:05:c5:d2:48:51:61:f7:
f6:f9:f0:66:ac:f8:7a:eb:be:8f:1c:35:ea:42:5b:
36:68:76:96:e8:bf:81:c6:8a:ec:01:38:4d:22:da:
d0:6d:39:dd:d4:30:28:34:12:70:cc:9c:b4:d6:88:
fa:22:c7:3c:54:51:9e:d4:16:55:0f:75:36:d2:75:
27:96:ec:7f:c3:c3:11:ca:68:e7:3e:8c:88:06:36:
7f:03:f2:bd:74:ee:ff:b0:d8:11:6c:4e:ed:7e:10:
0e:c5:1c:09:3e:d6:43:61:07:d1:97:fb:17:81:72:
01:13:9c:f7:f1:c4:a4:67:d8:e6:b0:2f:e0:7c:8a:
04:ae:59:8f:a4:48:de:78:da:df:d8:db:ab:96:20:
e1:7e:e4:49:73:0f:fa:97:4d:66:7b:dd:10:1d:20:
85:e6:53:d7:1b:25:6d:de:ea:bb:9f:9a:78:f1:18:
af:e8:73:c3:f2:5b:88:2e:82:8f:83:d5:7b:23:a7:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:8B:BA:4A:B7:8D:74:DC:46:85:85:06:0D:12:99:30:B4:83:57
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:70:0e:07:1c:d4:b1:a6:95:c5:52:c9:d8:9e:56:e0:a9:1b:
58:d5:ee:e8:88:ba:8a:0c:98:59:33:b7:14:d0:9b:89:96:81:
73:f0:43:76:75:d3:c1:ed:af:3e:b0:e0:83:00:4a:86:dd:80:
cd:7f:c8:65:98:0e:28:ef:bc:cf:e5:87:f2:89:c9:74:1a:50:
c0:24:69:94:25:e4:22:18:37:e8:99:e5:60:42:e4:1d:f8:d1:
e1:d3:a0:53:7a:ca:55:d8:fa:73:f4:67:b9:4e:2d:bc:83:c7:
8c:6f:4e:00:f1:69:51:21:2d:19:f5:53:0b:0e:a4:e8:9c:8b:
51:63:07:5e:e9:ee:1b:08:63:26:0d:83:78:d0:8b:6c:48:0a:
be:9a:eb:a3:3e:6a:58:0e:ff:c4:e1:cd:01:51:9b:5e:a4:1f:
1c:1c:cb:57:f2:9b:44:cd:6e:70:9a:7f:21:01:4c:e4:08:99:
05:dc:ec:5b:b6:4a:06:40:cd:fb:3a:88:c7:dc:5c:a2:aa:de:
a1:03:af:92:63:29:6f:da:bd:72:f0:4f:7a:ac:95:eb:85:2e:
b0:be:53:5d:fe:c9:13:3f:09:38:52:a3:49:19:f8:18:d9:c8:
c9:90:47:0b:73:67:24:04:f9:1c:ab:d4:cd:c4:4d:0b:89:a5:
6a:49:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:40:32 2025 by rpki-client